This patch updates the Designate tempest plugin to accommodate stable
branches that still have keystone scoped tokens. The "Direction
change"[1] means scoped tokens were dropped in the Bobcat (2023.2)
release. However the stable branches back to Wallaby will still have
scoped tokens available as a configuration option.
[1] https://governance.openstack.org/tc/goals/selected/consistent-and-secure-rbac.html#direction-change
Change-Id: Ia57b5126dbc9fbe98cbcaa7ad0e11d36c21a14da
Tempest is fixing the bug#1964509 (depends-on) where
project_reader user will be created under the same project
as primary, project_member, project_admin users.
'primary', 'project_admin', 'project_member', and 'project_reader'
creds will be created in same projects. All the alt creds will be
created under the new projects. non alt and alt creds will use
different project, for example, 'project_alt_member' and
'project_member' creds will be created in different project.
Related-Bug: #1964509
Depends-On: https://review.opendev.org/c/openstack/tempest/+/871018
Change-Id: I143e69c1e150ddf7fa1757dea7bced6bff6739a9
This patch adds a method that allows us to get the current Designate API version under test for use in test classes to skip tests against new features introduced in a specific API version.
This patch also centralizes the "primary" zones client to be instantiated once and updates the tests to use a standardized name for the client.
Finally, it adds a missing requirement of oslo.serialization to requirements.txt.
Change-Id: I240911c0ab9b9bad7851268865d6a8e867627673
1) Refactoring:
- Replace Python underscore variable with indexing.
- Remove the "message" assertion
2)"test_create_transfer_request_404"
- Try to create a transfer request with random id
3)"test_zone_transfer"
- Validation that transfer_accept deleted
after the transfer_request delete
Change-Id: If7aa1033d52b71a6e01559b6cd468d2f5e6ddf9c
This patch adds RBAC testing for allowed and disallowed credentials.
This is one of a series of patches adding testing. This patch covers the
zone transfer request API.
Depends-On: https://review.opendev.org/c/openstack/designate/+/836217
Change-Id: I7699e44ced5462267fe45cac78b1ee148f6603f6
Currently there are intermittent test failures due to inconsistent
management of TLDs across the test classes. This is due to some test
classes using the same TLD and cleaning them up or cases where a TLD is
expected to exist, but may not have been created yet.
This patch established a dedicated TLD for each test class that creates
zones. Inside each test case, a zone name will be created with the test
name and the test class TLD. This creates the required TLD isolation to
allow successful test concurrency.
The patch also changes the base TLD from 'org' to the RFC 2606 reserved 'test'.
This should allow for easier identification of test related resources.
Change-Id: I3509767ec0ce6be6b6f15a1bc15a730a4a144b09
This patch adds an API test the lists transfer requests using the
x-auth-sudo-project-id header and validates that the correct transfer
request is returned.
Change-Id: Ib4cfd1221f128ec4e37ba32e9118b2f88d924561
This patch makes the API tests compatible with keystone scoped
tokens and the new RBAC defaults.
For example, admin system scoped tokens do not have a project_id associated
with them requiring some tests to be updated to not assume the admin
credential always has a project_id.
This patch also makes some sections consistently ordered across files.
Change-Id: Ie2c7402967f40bb90e0d97dad1c3d59f82cb6d80
All the Designate service clients are registered via the plugin interface[1],
that way Tempest register and create the lazy initialization of registered
clients so that they can be access from there in consistent way.
But designate-tempest-client create a separate instance of those and access
instead of accessing the registered service client in Tempest. This commit
makes all the service clients access from Tempest registry and remove the
separate objects.
[1] https://github.com/openstack/designate-tempest-plugin/blob/master/designate_tempest_plugin/plugin.py#L78
Change-Id: I4b65ca16cd53ff4c6bece642764a4abe2a469c01
Designate has a fairly small default pagination limit of 20.
Some tests were making list API calls with the all-projects header,
which with parallel test execution could cause the list to exceed the
default pagination limit of 20. This would cause the tests to intermittently
fail.
This patch sets the request parameter "limit" to 1000 for these tests
to allow for parallel test execution which may cause lists to include
more than twenty entries.
Change-Id: Ic074c2c4dc5a5f97c609aac5992f78557722bb71
1) test_show_transfer_request_impersonate_another_project
Test is based on: "x-auth-sudo-project-id" HTTP header
2) test_list_transfer_requests_all_projects
Test is based on: "x-auth-all-projects" HTTP header
3) test_zone_transfer_target_project
Test validates that only targeted project is able to
accept the transfer request.
4) Improving the existing scenario test: "test_zone_transfer"
Zone ownership transfer shouldn't work more than once.
Change-Id: I1b345de2c9756ba1bcb0ec7b361c90baff3acb60
these tests create zones as part of the test but do clean them up
afterward slowly. This leads to these and following tests in the thread
to fail with over quota when default zone quota is sufficiently low.
Change-Id: Iebe15ca6d0d3101237a92e011b081c38647a8de6
We need to call set_network_resources() from class with API tests, to
avoid creating network resources. Which are not needed for API tests.
Change-Id: Ia93303390d9887722fa2cfde7757e5e9103ae585
Closes-Bug: #1689415
This reduces the number of smoke tests to < 10. It includes v1 tests, v2
tests and one scenario test to check that a zone goes to active.
Change-Id: I9233a5d783649fe2bfad8e772f4165bdc4e1c619
Useage of the tempest.lib version is preferred, as it's considered
API stable, unlike the tempest.test version.
Change-Id: Ida2efd9fdd9ce095aaa33ce41c90f93efbcf0970
This patch adds zone transfer_request_client's methods and tests
to Designate tempest plugin.
Partially-Implements: blueprint designate-tempest-plugin
Change-Id: I0c5b4a5796c398fb1d24cde124203c865ea21833
Michael Johnson